1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  *
4  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
5  *
6  ******************************************************************************/
7 #define _RTW_WLAN_UTIL_C_
8 
9 #include <drv_types.h>
10 #include <rtw_debug.h>
11 #include <hal_com_h2c.h>
12 
13 static unsigned char ARTHEROS_OUI1[] = {0x00, 0x03, 0x7f};
14 static unsigned char ARTHEROS_OUI2[] = {0x00, 0x13, 0x74};
15 
16 static unsigned char BROADCOM_OUI1[] = {0x00, 0x10, 0x18};
17 static unsigned char BROADCOM_OUI2[] = {0x00, 0x0a, 0xf7};
18 static unsigned char BROADCOM_OUI3[] = {0x00, 0x05, 0xb5};
19 
20 static unsigned char CISCO_OUI[] = {0x00, 0x40, 0x96};
21 static unsigned char MARVELL_OUI[] = {0x00, 0x50, 0x43};
22 static unsigned char RALINK_OUI[] = {0x00, 0x0c, 0x43};
23 static unsigned char REALTEK_OUI[] = {0x00, 0xe0, 0x4c};
24 static unsigned char AIRGOCAP_OUI[] = {0x00, 0x0a, 0xf5};
25 static unsigned char RSN_TKIP_CIPHER[4] = {0x00, 0x0f, 0xac, 0x02};
26 static unsigned char WPA_TKIP_CIPHER[4] = {0x00, 0x50, 0xf2, 0x02};
27 
28 #define R2T_PHY_DELAY	(0)
29 
30 /* define WAIT_FOR_BCN_TO_MIN	(3000) */
31 #define WAIT_FOR_BCN_TO_MIN	(6000)
32 #define WAIT_FOR_BCN_TO_MAX	(20000)
33 
34 #define DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS 1000
35 #define DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD 3
36 
37 static u8 rtw_basic_rate_cck[4] = {
38 	IEEE80211_CCK_RATE_1MB | IEEE80211_BASIC_RATE_MASK,
39 	IEEE80211_CCK_RATE_2MB | IEEE80211_BASIC_RATE_MASK,
40 	IEEE80211_CCK_RATE_5MB | IEEE80211_BASIC_RATE_MASK,
41 	IEEE80211_CCK_RATE_11MB | IEEE80211_BASIC_RATE_MASK
42 };
43 
44 static u8 rtw_basic_rate_ofdm[3] = {
45 	IEEE80211_OFDM_RATE_6MB | IEEE80211_BASIC_RATE_MASK,
46 	IEEE80211_OFDM_RATE_12MB | IEEE80211_BASIC_RATE_MASK,
47 	IEEE80211_OFDM_RATE_24MB | IEEE80211_BASIC_RATE_MASK
48 };
49 
50 u8 networktype_to_raid_ex(struct adapter *adapter, struct sta_info *psta)
51 {
52 	u8 raid, cur_rf_type, rf_type = RF_1T1R;
53 
54 	rtw_hal_get_hwreg(adapter, HW_VAR_RF_TYPE, (u8 *)(&cur_rf_type));
55 
56 	if (cur_rf_type == RF_1T1R) {
57 		rf_type = RF_1T1R;
58 	} else if (IsSupportedHT(psta->wireless_mode)) {
59 		if (psta->ra_mask & 0xfff00000)
60 			rf_type = RF_2T2R;
61 	}
62 
63 	switch (psta->wireless_mode) {
64 	case WIRELESS_11B:
65 		raid = RATEID_IDX_B;
66 		break;
67 	case WIRELESS_11G:
68 		raid = RATEID_IDX_G;
69 		break;
70 	case WIRELESS_11BG:
71 		raid = RATEID_IDX_BG;
72 		break;
73 	case WIRELESS_11_24N:
74 	case WIRELESS_11G_24N:
75 		if (rf_type == RF_2T2R)
76 			raid = RATEID_IDX_GN_N2SS;
77 		else
78 			raid = RATEID_IDX_GN_N1SS;
79 		break;
80 	case WIRELESS_11B_24N:
81 	case WIRELESS_11BG_24N:
82 		if (psta->bw_mode == CHANNEL_WIDTH_20) {
83 			if (rf_type == RF_2T2R)
84 				raid = RATEID_IDX_BGN_20M_2SS_BN;
85 			else
86 				raid = RATEID_IDX_BGN_20M_1SS_BN;
87 		} else {
88 			if (rf_type == RF_2T2R)
89 				raid = RATEID_IDX_BGN_40M_2SS;
90 			else
91 				raid = RATEID_IDX_BGN_40M_1SS;
92 		}
93 		break;
94 	default:
95 		raid = RATEID_IDX_BGN_40M_2SS;
96 		break;
97 	}
98 	return raid;
99 }
100 
101 unsigned char ratetbl_val_2wifirate(unsigned char rate);
102 unsigned char ratetbl_val_2wifirate(unsigned char rate)
103 {
104 	switch (rate & 0x7f) {
105 	case 0:
106 		return IEEE80211_CCK_RATE_1MB;
107 	case 1:
108 		return IEEE80211_CCK_RATE_2MB;
109 	case 2:
110 		return IEEE80211_CCK_RATE_5MB;
111 	case 3:
112 		return IEEE80211_CCK_RATE_11MB;
113 	case 4:
114 		return IEEE80211_OFDM_RATE_6MB;
115 	case 5:
116 		return IEEE80211_OFDM_RATE_9MB;
117 	case 6:
118 		return IEEE80211_OFDM_RATE_12MB;
119 	case 7:
120 		return IEEE80211_OFDM_RATE_18MB;
121 	case 8:
122 		return IEEE80211_OFDM_RATE_24MB;
123 	case 9:
124 		return IEEE80211_OFDM_RATE_36MB;
125 	case 10:
126 		return IEEE80211_OFDM_RATE_48MB;
127 	case 11:
128 		return IEEE80211_OFDM_RATE_54MB;
129 	default:
130 		return 0;
131 	}
132 }
133 
134 int is_basicrate(struct adapter *padapter, unsigned char rate);
135 int is_basicrate(struct adapter *padapter, unsigned char rate)
136 {
137 	int i;
138 	unsigned char val;
139 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
140 
141 	for (i = 0; i < NumRates; i++) {
142 		val = pmlmeext->basicrate[i];
143 
144 		if ((val != 0xff) && (val != 0xfe))
145 			if (rate == ratetbl_val_2wifirate(val))
146 				return true;
147 	}
148 
149 	return false;
150 }
151 
152 unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset);
153 unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset)
154 {
155 	int i;
156 	unsigned char rate;
157 	unsigned int	len = 0;
158 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
159 
160 	for (i = 0; i < NumRates; i++) {
161 		rate = pmlmeext->datarate[i];
162 
163 		switch (rate) {
164 		case 0xff:
165 			return len;
166 
167 		case 0xfe:
168 			continue;
169 
170 		default:
171 			rate = ratetbl_val_2wifirate(rate);
172 
173 			if (is_basicrate(padapter, rate) == true)
174 				rate |= IEEE80211_BASIC_RATE_MASK;
175 
176 			rateset[len] = rate;
177 			len++;
178 			break;
179 		}
180 	}
181 	return len;
182 }
183 
184 void get_rate_set(struct adapter *padapter, unsigned char *pbssrate, int *bssrate_len)
185 {
186 	unsigned char supportedrates[NumRates];
187 
188 	memset(supportedrates, 0, NumRates);
189 	*bssrate_len = ratetbl2rateset(padapter, supportedrates);
190 	memcpy(pbssrate, supportedrates, *bssrate_len);
191 }
192 
193 void set_mcs_rate_by_mask(u8 *mcs_set, u32 mask)
194 {
195 	u8 mcs_rate_1r = (u8)(mask&0xff);
196 	u8 mcs_rate_2r = (u8)((mask>>8)&0xff);
197 	u8 mcs_rate_3r = (u8)((mask>>16)&0xff);
198 	u8 mcs_rate_4r = (u8)((mask>>24)&0xff);
199 
200 	mcs_set[0] &= mcs_rate_1r;
201 	mcs_set[1] &= mcs_rate_2r;
202 	mcs_set[2] &= mcs_rate_3r;
203 	mcs_set[3] &= mcs_rate_4r;
204 }
205 
206 void UpdateBrateTbl(struct adapter *Adapter, u8 *mBratesOS)
207 {
208 	u8 i;
209 	u8 rate;
210 
211 	/*  1M, 2M, 5.5M, 11M, 6M, 12M, 24M are mandatory. */
212 	for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
213 		rate = mBratesOS[i] & 0x7f;
214 		switch (rate) {
215 		case IEEE80211_CCK_RATE_1MB:
216 		case IEEE80211_CCK_RATE_2MB:
217 		case IEEE80211_CCK_RATE_5MB:
218 		case IEEE80211_CCK_RATE_11MB:
219 		case IEEE80211_OFDM_RATE_6MB:
220 		case IEEE80211_OFDM_RATE_12MB:
221 		case IEEE80211_OFDM_RATE_24MB:
222 			mBratesOS[i] |= IEEE80211_BASIC_RATE_MASK;
223 			break;
224 		}
225 	}
226 }
227 
228 void UpdateBrateTblForSoftAP(u8 *bssrateset, u32 bssratelen)
229 {
230 	u8 i;
231 	u8 rate;
232 
233 	for (i = 0; i < bssratelen; i++) {
234 		rate = bssrateset[i] & 0x7f;
235 		switch (rate) {
236 		case IEEE80211_CCK_RATE_1MB:
237 		case IEEE80211_CCK_RATE_2MB:
238 		case IEEE80211_CCK_RATE_5MB:
239 		case IEEE80211_CCK_RATE_11MB:
240 			bssrateset[i] |= IEEE80211_BASIC_RATE_MASK;
241 			break;
242 		}
243 	}
244 }
245 
246 void Save_DM_Func_Flag(struct adapter *padapter)
247 {
248 	u8 bSaveFlag = true;
249 
250 	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
251 }
252 
253 void Restore_DM_Func_Flag(struct adapter *padapter)
254 {
255 	u8 bSaveFlag = false;
256 
257 	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
258 }
259 
260 void Switch_DM_Func(struct adapter *padapter, u32 mode, u8 enable)
261 {
262 	if (enable == true)
263 		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
264 	else
265 		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
266 }
267 
268 void Set_MSR(struct adapter *padapter, u8 type)
269 {
270 	rtw_hal_set_hwreg(padapter, HW_VAR_MEDIA_STATUS, (u8 *)(&type));
271 }
272 
273 inline u8 rtw_get_oper_ch(struct adapter *adapter)
274 {
275 	return adapter_to_dvobj(adapter)->oper_channel;
276 }
277 
278 inline void rtw_set_oper_ch(struct adapter *adapter, u8 ch)
279 {
280 #ifdef DBG_CH_SWITCH
281 	const int len = 128;
282 	char msg[128] = {0};
283 	int cnt = 0;
284 	int i = 0;
285 #endif  /* DBG_CH_SWITCH */
286 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
287 
288 	if (dvobj->oper_channel != ch) {
289 		dvobj->on_oper_ch_time = jiffies;
290 
291 #ifdef DBG_CH_SWITCH
292 		cnt += scnprintf(msg+cnt, len-cnt, "switch to ch %3u", ch);
293 
294 		for (i = 0; i < dvobj->iface_nums; i++) {
295 			struct adapter *iface = dvobj->padapters[i];
296 
297 			cnt += scnprintf(msg+cnt, len-cnt, " [%s:", ADPT_ARG(iface));
298 			if (iface->mlmeextpriv.cur_channel == ch)
299 				cnt += scnprintf(msg+cnt, len-cnt, "C");
300 			else
301 				cnt += scnprintf(msg+cnt, len-cnt, "_");
302 			if (iface->wdinfo.listen_channel == ch && !rtw_p2p_chk_state(&iface->wdinfo, P2P_STATE_NONE))
303 				cnt += scnprintf(msg+cnt, len-cnt, "L");
304 			else
305 				cnt += scnprintf(msg+cnt, len-cnt, "_");
306 			cnt += scnprintf(msg+cnt, len-cnt, "]");
307 		}
308 
309 #endif /* DBG_CH_SWITCH */
310 	}
311 
312 	dvobj->oper_channel = ch;
313 }
314 
315 inline u8 rtw_get_oper_bw(struct adapter *adapter)
316 {
317 	return adapter_to_dvobj(adapter)->oper_bwmode;
318 }
319 
320 inline void rtw_set_oper_bw(struct adapter *adapter, u8 bw)
321 {
322 	adapter_to_dvobj(adapter)->oper_bwmode = bw;
323 }
324 
325 inline u8 rtw_get_oper_choffset(struct adapter *adapter)
326 {
327 	return adapter_to_dvobj(adapter)->oper_ch_offset;
328 }
329 
330 inline void rtw_set_oper_choffset(struct adapter *adapter, u8 offset)
331 {
332 	adapter_to_dvobj(adapter)->oper_ch_offset = offset;
333 }
334 
335 u8 rtw_get_center_ch(u8 channel, u8 chnl_bw, u8 chnl_offset)
336 {
337 	u8 center_ch = channel;
338 
339 	if (chnl_bw == CHANNEL_WIDTH_80) {
340 		center_ch = 7;
341 	} else if (chnl_bw == CHANNEL_WIDTH_40) {
342 		if (chnl_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
343 			center_ch = channel + 2;
344 		else
345 			center_ch = channel - 2;
346 	}
347 
348 	return center_ch;
349 }
350 
351 inline unsigned long rtw_get_on_cur_ch_time(struct adapter *adapter)
352 {
353 	if (adapter->mlmeextpriv.cur_channel == adapter_to_dvobj(adapter)->oper_channel)
354 		return adapter_to_dvobj(adapter)->on_oper_ch_time;
355 	else
356 		return 0;
357 }
358 
359 void SelectChannel(struct adapter *padapter, unsigned char channel)
360 {
361 	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
362 		return;
363 
364 	/* saved channel info */
365 	rtw_set_oper_ch(padapter, channel);
366 
367 	rtw_hal_set_chan(padapter, channel);
368 
369 	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
370 }
371 
372 void set_channel_bwmode(struct adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode)
373 {
374 	u8 center_ch, chnl_offset80 = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
375 
376 	center_ch = rtw_get_center_ch(channel, bwmode, channel_offset);
377 
378 	if (bwmode == CHANNEL_WIDTH_80) {
379 		if (center_ch > channel)
380 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_LOWER;
381 		else if (center_ch < channel)
382 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_UPPER;
383 		else
384 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
385 	}
386 
387 	/* set Channel */
388 	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
389 		return;
390 
391 	/* saved channel/bw info */
392 	rtw_set_oper_ch(padapter, channel);
393 	rtw_set_oper_bw(padapter, bwmode);
394 	rtw_set_oper_choffset(padapter, channel_offset);
395 
396 	rtw_hal_set_chnl_bw(padapter, center_ch, bwmode, channel_offset, chnl_offset80); /*  set center channel */
397 
398 	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
399 }
400 
401 inline u8 *get_my_bssid(struct wlan_bssid_ex *pnetwork)
402 {
403 	return pnetwork->MacAddress;
404 }
405 
406 u16 get_beacon_interval(struct wlan_bssid_ex *bss)
407 {
408 	__le16 val;
409 
410 	memcpy((unsigned char *)&val, rtw_get_beacon_interval_from_ie(bss->IEs), 2);
411 
412 	return le16_to_cpu(val);
413 }
414 
415 int is_client_associated_to_ap(struct adapter *padapter)
416 {
417 	struct mlme_ext_priv *pmlmeext;
418 	struct mlme_ext_info *pmlmeinfo;
419 
420 	if (!padapter)
421 		return _FAIL;
422 
423 	pmlmeext = &padapter->mlmeextpriv;
424 	pmlmeinfo = &(pmlmeext->mlmext_info);
425 
426 	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE))
427 		return true;
428 	else
429 		return _FAIL;
430 }
431 
432 int is_client_associated_to_ibss(struct adapter *padapter)
433 {
434 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
435 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
436 
437 	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
438 		return true;
439 	else
440 		return _FAIL;
441 }
442 
443 int is_IBSS_empty(struct adapter *padapter)
444 {
445 	unsigned int i;
446 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
447 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
448 
449 	for (i = IBSS_START_MAC_ID; i < NUM_STA; i++) {
450 		if (pmlmeinfo->FW_sta_info[i].status == 1)
451 			return _FAIL;
452 	}
453 
454 	return true;
455 }
456 
457 unsigned int decide_wait_for_beacon_timeout(unsigned int bcn_interval)
458 {
459 	if ((bcn_interval << 2) < WAIT_FOR_BCN_TO_MIN)
460 		return WAIT_FOR_BCN_TO_MIN;
461 	else if ((bcn_interval << 2) > WAIT_FOR_BCN_TO_MAX)
462 		return WAIT_FOR_BCN_TO_MAX;
463 	else
464 		return bcn_interval << 2;
465 }
466 
467 void invalidate_cam_all(struct adapter *padapter)
468 {
469 	struct dvobj_priv *dvobj = adapter_to_dvobj(padapter);
470 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
471 
472 	rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, NULL);
473 
474 	spin_lock_bh(&cam_ctl->lock);
475 	cam_ctl->bitmap = 0;
476 	memset(dvobj->cam_cache, 0, sizeof(struct cam_entry_cache)*TOTAL_CAM_ENTRY);
477 	spin_unlock_bh(&cam_ctl->lock);
478 }
479 
480 static u32 _ReadCAM(struct adapter *padapter, u32 addr)
481 {
482 	u32 count = 0, cmd;
483 
484 	cmd = CAM_POLLINIG | addr;
485 	rtw_write32(padapter, RWCAM, cmd);
486 
487 	do {
488 		if (0 == (rtw_read32(padapter, REG_CAMCMD) & CAM_POLLINIG))
489 			break;
490 	} while (count++ < 100);
491 
492 	return rtw_read32(padapter, REG_CAMREAD);
493 }
494 
495 void read_cam(struct adapter *padapter, u8 entry, u8 *get_key)
496 {
497 	u32 j, addr, cmd;
498 
499 	addr = entry << 3;
500 
501 	for (j = 0; j < 6; j++) {
502 		cmd = _ReadCAM(padapter, addr+j);
503 		if (j > 1) /* get key from cam */
504 			memcpy(get_key+(j-2)*4, &cmd, 4);
505 	}
506 }
507 
508 void _write_cam(struct adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key)
509 {
510 	unsigned int i, val, addr;
511 	int j;
512 	u32 cam_val[2];
513 
514 	addr = entry << 3;
515 
516 	for (j = 5; j >= 0; j--) {
517 		switch (j) {
518 		case 0:
519 			val = (ctrl | (mac[0] << 16) | (mac[1] << 24));
520 			break;
521 		case 1:
522 			val = (mac[2] | (mac[3] << 8) | (mac[4] << 16) | (mac[5] << 24));
523 			break;
524 		default:
525 			i = (j - 2) << 2;
526 			val = (key[i] | (key[i+1] << 8) | (key[i+2] << 16) | (key[i+3] << 24));
527 			break;
528 		}
529 
530 		cam_val[0] = val;
531 		cam_val[1] = addr + (unsigned int)j;
532 
533 		rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
534 	}
535 }
536 
537 void _clear_cam_entry(struct adapter *padapter, u8 entry)
538 {
539 	unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
540 	unsigned char null_key[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
541 
542 	_write_cam(padapter, entry, 0, null_sta, null_key);
543 }
544 
545 inline void write_cam(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
546 {
547 	_write_cam(adapter, id, ctrl, mac, key);
548 	write_cam_cache(adapter, id, ctrl, mac, key);
549 }
550 
551 inline void clear_cam_entry(struct adapter *adapter, u8 id)
552 {
553 	_clear_cam_entry(adapter, id);
554 	clear_cam_cache(adapter, id);
555 }
556 
557 void write_cam_cache(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
558 {
559 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
560 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
561 
562 	spin_lock_bh(&cam_ctl->lock);
563 
564 	dvobj->cam_cache[id].ctrl = ctrl;
565 	memcpy(dvobj->cam_cache[id].mac, mac, ETH_ALEN);
566 	memcpy(dvobj->cam_cache[id].key, key, 16);
567 
568 	spin_unlock_bh(&cam_ctl->lock);
569 }
570 
571 void clear_cam_cache(struct adapter *adapter, u8 id)
572 {
573 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
574 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
575 
576 	spin_lock_bh(&cam_ctl->lock);
577 
578 	memset(&(dvobj->cam_cache[id]), 0, sizeof(struct cam_entry_cache));
579 
580 	spin_unlock_bh(&cam_ctl->lock);
581 }
582 
583 static bool _rtw_camid_is_gk(struct adapter *adapter, u8 cam_id)
584 {
585 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
586 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
587 	bool ret = false;
588 
589 	if (cam_id >= TOTAL_CAM_ENTRY)
590 		goto exit;
591 
592 	if (!(cam_ctl->bitmap & BIT(cam_id)))
593 		goto exit;
594 
595 	ret = (dvobj->cam_cache[cam_id].ctrl&BIT6)?true:false;
596 
597 exit:
598 	return ret;
599 }
600 
601 static s16 _rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
602 {
603 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
604 	int i;
605 	s16 cam_id = -1;
606 
607 	for (i = 0; i < TOTAL_CAM_ENTRY; i++) {
608 		if (addr && memcmp(dvobj->cam_cache[i].mac, addr, ETH_ALEN))
609 			continue;
610 		if (kid >= 0 && kid != (dvobj->cam_cache[i].ctrl&0x03))
611 			continue;
612 
613 		cam_id = i;
614 		break;
615 	}
616 
617 	return cam_id;
618 }
619 
620 s16 rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
621 {
622 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
623 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
624 	s16 cam_id = -1;
625 
626 	spin_lock_bh(&cam_ctl->lock);
627 	cam_id = _rtw_camid_search(adapter, addr, kid);
628 	spin_unlock_bh(&cam_ctl->lock);
629 
630 	return cam_id;
631 }
632 
633 s16 rtw_camid_alloc(struct adapter *adapter, struct sta_info *sta, u8 kid)
634 {
635 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
636 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
637 	s16 cam_id = -1;
638 	struct mlme_ext_info *mlmeinfo;
639 
640 	spin_lock_bh(&cam_ctl->lock);
641 
642 	mlmeinfo = &adapter->mlmeextpriv.mlmext_info;
643 
644 	if ((((mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) || ((mlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
645 		&& !sta) {
646 		/* AP/Ad-hoc mode group key: static alloction to default key by key ID */
647 		if (kid > 3) {
648 			netdev_dbg(adapter->pnetdev,
649 				   FUNC_ADPT_FMT " group key with invalid key id:%u\n",
650 				   FUNC_ADPT_ARG(adapter), kid);
651 			rtw_warn_on(1);
652 			goto bitmap_handle;
653 		}
654 
655 		cam_id = kid;
656 	} else {
657 		int i;
658 		u8 *addr = sta?sta->hwaddr:NULL;
659 
660 		if (!sta) {
661 			if (!(mlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)) {
662 				/* bypass STA mode group key setting before connected(ex:WEP) because bssid is not ready */
663 				goto bitmap_handle;
664 			}
665 
666 			addr = get_bssid(&adapter->mlmepriv);
667 		}
668 
669 		i = _rtw_camid_search(adapter, addr, kid);
670 		if (i >= 0) {
671 			/* Fix issue that pairwise and group key have same key id. Pairwise key first, group key can overwirte group only(ex: rekey) */
672 			if (sta || _rtw_camid_is_gk(adapter, i))
673 				cam_id = i;
674 			else
675 				netdev_dbg(adapter->pnetdev,
676 					   FUNC_ADPT_FMT " group key id:%u the same key id as pairwise key\n",
677 					   FUNC_ADPT_ARG(adapter), kid);
678 			goto bitmap_handle;
679 		}
680 
681 		for (i = 4; i < TOTAL_CAM_ENTRY; i++)
682 			if (!(cam_ctl->bitmap & BIT(i)))
683 				break;
684 
685 		if (i == TOTAL_CAM_ENTRY) {
686 			if (sta)
687 				netdev_dbg(adapter->pnetdev,
688 					   FUNC_ADPT_FMT " pairwise key with %pM id:%u no room\n",
689 					   FUNC_ADPT_ARG(adapter),
690 					   MAC_ARG(sta->hwaddr), kid);
691 			else
692 				netdev_dbg(adapter->pnetdev,
693 					   FUNC_ADPT_FMT " group key id:%u no room\n",
694 					   FUNC_ADPT_ARG(adapter), kid);
695 			rtw_warn_on(1);
696 			goto bitmap_handle;
697 		}
698 
699 		cam_id = i;
700 	}
701 
702 bitmap_handle:
703 	if (cam_id >= 0 && cam_id < 32)
704 		cam_ctl->bitmap |= BIT(cam_id);
705 
706 	spin_unlock_bh(&cam_ctl->lock);
707 
708 	return cam_id;
709 }
710 
711 void rtw_camid_free(struct adapter *adapter, u8 cam_id)
712 {
713 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
714 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
715 
716 	spin_lock_bh(&cam_ctl->lock);
717 
718 	if (cam_id < TOTAL_CAM_ENTRY)
719 		cam_ctl->bitmap &= ~(BIT(cam_id));
720 
721 	spin_unlock_bh(&cam_ctl->lock);
722 }
723 
724 int allocate_fw_sta_entry(struct adapter *padapter)
725 {
726 	unsigned int mac_id;
727 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
728 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
729 
730 	for (mac_id = IBSS_START_MAC_ID; mac_id < NUM_STA; mac_id++) {
731 		if (pmlmeinfo->FW_sta_info[mac_id].status == 0) {
732 			pmlmeinfo->FW_sta_info[mac_id].status = 1;
733 			pmlmeinfo->FW_sta_info[mac_id].retry = 0;
734 			break;
735 		}
736 	}
737 
738 	return mac_id;
739 }
740 
741 void flush_all_cam_entry(struct adapter *padapter)
742 {
743 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
744 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
745 
746 	invalidate_cam_all(padapter);
747 	/* clear default key related key search setting */
748 	rtw_hal_set_hwreg(padapter, HW_VAR_SEC_DK_CFG, (u8 *)false);
749 
750 	memset((u8 *)(pmlmeinfo->FW_sta_info), 0, sizeof(pmlmeinfo->FW_sta_info));
751 }
752 
753 int WMM_param_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
754 {
755 	/* struct registry_priv *pregpriv = &padapter->registrypriv; */
756 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
757 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
758 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
759 
760 	if (pmlmepriv->qospriv.qos_option == 0) {
761 		pmlmeinfo->WMM_enable = 0;
762 		return false;
763 	}
764 
765 	if (!memcmp(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element)))
766 		return false;
767 	else
768 		memcpy(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element));
769 
770 	pmlmeinfo->WMM_enable = 1;
771 	return true;
772 }
773 
774 static void sort_wmm_ac_params(u32 *inx, u32 *edca)
775 {
776 	u32 i, j, change_inx = false;
777 
778 	/* entry indx: 0->vo, 1->vi, 2->be, 3->bk. */
779 	for (i = 0; i < 4; i++) {
780 		for (j = i + 1; j < 4; j++) {
781 			/* compare CW and AIFS */
782 			if ((edca[j] & 0xFFFF) < (edca[i] & 0xFFFF)) {
783 				change_inx = true;
784 			} else if ((edca[j] & 0xFFFF) == (edca[i] & 0xFFFF)) {
785 				/* compare TXOP */
786 				if ((edca[j] >> 16) > (edca[i] >> 16))
787 					change_inx = true;
788 			}
789 
790 			if (change_inx) {
791 				swap(edca[i], edca[j]);
792 				swap(inx[i], inx[j]);
793 
794 				change_inx = false;
795 			}
796 		}
797 	}
798 }
799 
800 void WMMOnAssocRsp(struct adapter *padapter)
801 {
802 	u8 ACI, ACM, AIFS, ECWMin, ECWMax, aSifsTime;
803 	u8 acm_mask;
804 	u16 TXOP;
805 	u32 acParm, i;
806 	u32 edca[4], inx[4];
807 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
808 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
809 	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
810 	struct registry_priv *pregpriv = &padapter->registrypriv;
811 
812 	acm_mask = 0;
813 
814 	if (pmlmeext->cur_wireless_mode & WIRELESS_11_24N)
815 		aSifsTime = 16;
816 	else
817 		aSifsTime = 10;
818 
819 	if (pmlmeinfo->WMM_enable == 0) {
820 		padapter->mlmepriv.acm_mask = 0;
821 
822 		AIFS = aSifsTime + (2 * pmlmeinfo->slotTime);
823 
824 		if (pmlmeext->cur_wireless_mode & WIRELESS_11G) {
825 			ECWMin = 4;
826 			ECWMax = 10;
827 		} else if (pmlmeext->cur_wireless_mode & WIRELESS_11B) {
828 			ECWMin = 5;
829 			ECWMax = 10;
830 		} else {
831 			ECWMin = 4;
832 			ECWMax = 10;
833 		}
834 
835 		TXOP = 0;
836 		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
837 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
838 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
839 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
840 
841 		ECWMin = 2;
842 		ECWMax = 3;
843 		TXOP = 0x2f;
844 		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
845 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
846 	} else {
847 		edca[0] = edca[1] = edca[2] = edca[3] = 0;
848 
849 		for (i = 0; i < 4; i++) {
850 			ACI = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 5) & 0x03;
851 			ACM = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 4) & 0x01;
852 
853 			/* AIFS = AIFSN * slot time + SIFS - r2t phy delay */
854 			AIFS = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN & 0x0f) * pmlmeinfo->slotTime + aSifsTime;
855 
856 			ECWMin = (pmlmeinfo->WMM_param.ac_param[i].CW & 0x0f);
857 			ECWMax = (pmlmeinfo->WMM_param.ac_param[i].CW & 0xf0) >> 4;
858 			TXOP = le16_to_cpu(pmlmeinfo->WMM_param.ac_param[i].TXOP_limit);
859 
860 			acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
861 
862 			switch (ACI) {
863 			case 0x0:
864 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
865 				acm_mask |= (ACM ? BIT(1):0);
866 				edca[XMIT_BE_QUEUE] = acParm;
867 				break;
868 
869 			case 0x1:
870 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
871 				/* acm_mask |= (ACM? BIT(0):0); */
872 				edca[XMIT_BK_QUEUE] = acParm;
873 				break;
874 
875 			case 0x2:
876 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
877 				acm_mask |= (ACM ? BIT(2):0);
878 				edca[XMIT_VI_QUEUE] = acParm;
879 				break;
880 
881 			case 0x3:
882 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
883 				acm_mask |= (ACM ? BIT(3):0);
884 				edca[XMIT_VO_QUEUE] = acParm;
885 				break;
886 			}
887 		}
888 
889 		if (padapter->registrypriv.acm_method == 1)
890 			rtw_hal_set_hwreg(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
891 		else
892 			padapter->mlmepriv.acm_mask = acm_mask;
893 
894 		inx[0] = 0; inx[1] = 1; inx[2] = 2; inx[3] = 3;
895 
896 		if (pregpriv->wifi_spec == 1)
897 			sort_wmm_ac_params(inx, edca);
898 
899 		for (i = 0; i < 4; i++)
900 			pxmitpriv->wmm_para_seq[i] = inx[i];
901 	}
902 }
903 
904 static void bwmode_update_check(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
905 {
906 	unsigned char  new_bwmode;
907 	unsigned char  new_ch_offset;
908 	struct HT_info_element	 *pHT_info;
909 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
910 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
911 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
912 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
913 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
914 	u8 cbw40_enable = 0;
915 
916 	if (!pIE)
917 		return;
918 
919 	if (phtpriv->ht_option == false)
920 		return;
921 
922 	if (pmlmeext->cur_bwmode >= CHANNEL_WIDTH_80)
923 		return;
924 
925 	if (pIE->Length > sizeof(struct HT_info_element))
926 		return;
927 
928 	pHT_info = (struct HT_info_element *)pIE->data;
929 
930 	if (pmlmeext->cur_channel > 14) {
931 		if ((pregistrypriv->bw_mode & 0xf0) > 0)
932 			cbw40_enable = 1;
933 	} else {
934 		if ((pregistrypriv->bw_mode & 0x0f) > 0)
935 			cbw40_enable = 1;
936 	}
937 
938 	if ((pHT_info->infos[0] & BIT(2)) && cbw40_enable) {
939 		new_bwmode = CHANNEL_WIDTH_40;
940 
941 		switch (pHT_info->infos[0] & 0x3) {
942 		case 1:
943 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
944 			break;
945 
946 		case 3:
947 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
948 			break;
949 
950 		default:
951 			new_bwmode = CHANNEL_WIDTH_20;
952 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
953 			break;
954 		}
955 	} else {
956 		new_bwmode = CHANNEL_WIDTH_20;
957 		new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
958 	}
959 
960 	if ((new_bwmode != pmlmeext->cur_bwmode) || (new_ch_offset != pmlmeext->cur_ch_offset)) {
961 		pmlmeinfo->bwmode_updated = true;
962 
963 		pmlmeext->cur_bwmode = new_bwmode;
964 		pmlmeext->cur_ch_offset = new_ch_offset;
965 
966 		/* update HT info also */
967 		HT_info_handler(padapter, pIE);
968 	} else {
969 		pmlmeinfo->bwmode_updated = false;
970 	}
971 
972 	if (true == pmlmeinfo->bwmode_updated) {
973 		struct sta_info *psta;
974 		struct wlan_bssid_ex	*cur_network = &(pmlmeinfo->network);
975 		struct sta_priv *pstapriv = &padapter->stapriv;
976 
977 		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
978 
979 		/* update ap's stainfo */
980 		psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
981 		if (psta) {
982 			struct ht_priv *phtpriv_sta = &psta->htpriv;
983 
984 			if (phtpriv_sta->ht_option) {
985 				/*  bwmode */
986 				psta->bw_mode = pmlmeext->cur_bwmode;
987 				phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
988 			} else {
989 				psta->bw_mode = CHANNEL_WIDTH_20;
990 				phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
991 			}
992 
993 			rtw_dm_ra_mask_wk_cmd(padapter, (u8 *)psta);
994 		}
995 	}
996 }
997 
998 void HT_caps_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
999 {
1000 	unsigned int	i;
1001 	u8 rf_type;
1002 	u8 max_AMPDU_len, min_MPDU_spacing;
1003 	u8 cur_ldpc_cap = 0, cur_stbc_cap = 0;
1004 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1005 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1006 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1007 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
1008 
1009 	if (!pIE)
1010 		return;
1011 
1012 	if (phtpriv->ht_option == false)
1013 		return;
1014 
1015 	pmlmeinfo->HT_caps_enable = 1;
1016 
1017 	for (i = 0; i < (pIE->Length); i++) {
1018 		if (i != 2) {
1019 			/* Commented by Albert 2010/07/12 */
1020 			/* Got the endian issue here. */
1021 			pmlmeinfo->HT_caps.u.HT_cap[i] &= (pIE->data[i]);
1022 		} else {
1023 			/* modify from  fw by Thomas 2010/11/17 */
1024 			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3) > (pIE->data[i] & 0x3))
1025 				max_AMPDU_len = (pIE->data[i] & 0x3);
1026 			else
1027 				max_AMPDU_len = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3);
1028 
1029 			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) > (pIE->data[i] & 0x1c))
1030 				min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c);
1031 			else
1032 				min_MPDU_spacing = (pIE->data[i] & 0x1c);
1033 
1034 			pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para = max_AMPDU_len | min_MPDU_spacing;
1035 		}
1036 	}
1037 	rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
1038 
1039 	/* update the MCS set */
1040 	for (i = 0; i < 16; i++)
1041 		pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= pmlmeext->default_supported_mcs_set[i];
1042 
1043 	/* update the MCS rates */
1044 	switch (rf_type) {
1045 	case RF_1T1R:
1046 	case RF_1T2R:
1047 		set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_1R);
1048 		break;
1049 	case RF_2T2R:
1050 	default:
1051 		set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R);
1052 	}
1053 
1054 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1055 		/*  Config STBC setting */
1056 		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) &&
1057 		    GET_HT_CAPABILITY_ELE_TX_STBC(pIE->data))
1058 			SET_FLAG(cur_stbc_cap, STBC_HT_ENABLE_TX);
1059 
1060 		phtpriv->stbc_cap = cur_stbc_cap;
1061 	} else {
1062 		/*  Config LDPC Coding Capability */
1063 		if (TEST_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_TX) &&
1064 		    GET_HT_CAPABILITY_ELE_LDPC_CAP(pIE->data))
1065 			SET_FLAG(cur_ldpc_cap, (LDPC_HT_ENABLE_TX | LDPC_HT_CAP_TX));
1066 
1067 		phtpriv->ldpc_cap = cur_ldpc_cap;
1068 
1069 		/*  Config STBC setting */
1070 		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) &&
1071 		    GET_HT_CAPABILITY_ELE_RX_STBC(pIE->data))
1072 			SET_FLAG(cur_stbc_cap, (STBC_HT_ENABLE_TX | STBC_HT_CAP_TX));
1073 
1074 		phtpriv->stbc_cap = cur_stbc_cap;
1075 	}
1076 }
1077 
1078 void HT_info_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1079 {
1080 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1081 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1082 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1083 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
1084 
1085 	if (!pIE)
1086 		return;
1087 
1088 	if (phtpriv->ht_option == false)
1089 		return;
1090 
1091 	if (pIE->Length > sizeof(struct HT_info_element))
1092 		return;
1093 
1094 	pmlmeinfo->HT_info_enable = 1;
1095 	memcpy(&(pmlmeinfo->HT_info), pIE->data, pIE->Length);
1096 }
1097 
1098 void HTOnAssocRsp(struct adapter *padapter)
1099 {
1100 	unsigned char max_AMPDU_len;
1101 	unsigned char min_MPDU_spacing;
1102 	/* struct registry_priv  *pregpriv = &padapter->registrypriv; */
1103 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1104 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1105 
1106 	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable)) {
1107 		pmlmeinfo->HT_enable = 1;
1108 	} else {
1109 		pmlmeinfo->HT_enable = 0;
1110 		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
1111 		return;
1112 	}
1113 
1114 	/* handle A-MPDU parameter field */
1115 	/*
1116 		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
1117 		AMPDU_para [4:2]:Min MPDU Start Spacing
1118 	*/
1119 	max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;
1120 
1121 	min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;
1122 
1123 	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
1124 
1125 	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
1126 }
1127 
1128 void ERP_IE_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1129 {
1130 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1131 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1132 
1133 	if (pIE->Length > 1)
1134 		return;
1135 
1136 	pmlmeinfo->ERP_enable = 1;
1137 	memcpy(&(pmlmeinfo->ERP_IE), pIE->data, pIE->Length);
1138 }
1139 
1140 void VCS_update(struct adapter *padapter, struct sta_info *psta)
1141 {
1142 	struct registry_priv  *pregpriv = &padapter->registrypriv;
1143 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1144 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1145 
1146 	switch (pregpriv->vrtl_carrier_sense) {/* 0:off 1:on 2:auto */
1147 	case 0: /* off */
1148 		psta->rtsen = 0;
1149 		psta->cts2self = 0;
1150 		break;
1151 
1152 	case 1: /* on */
1153 		if (pregpriv->vcs_type == 1) { /* 1:RTS/CTS 2:CTS to self */
1154 			psta->rtsen = 1;
1155 			psta->cts2self = 0;
1156 		} else {
1157 			psta->rtsen = 0;
1158 			psta->cts2self = 1;
1159 		}
1160 		break;
1161 
1162 	case 2: /* auto */
1163 	default:
1164 		if ((pmlmeinfo->ERP_enable) && (pmlmeinfo->ERP_IE & BIT(1))) {
1165 			if (pregpriv->vcs_type == 1) {
1166 				psta->rtsen = 1;
1167 				psta->cts2self = 0;
1168 			} else {
1169 				psta->rtsen = 0;
1170 				psta->cts2self = 1;
1171 			}
1172 		} else {
1173 			psta->rtsen = 0;
1174 			psta->cts2self = 0;
1175 		}
1176 		break;
1177 	}
1178 }
1179 
1180 void update_ldpc_stbc_cap(struct sta_info *psta)
1181 {
1182 	if (psta->htpriv.ht_option) {
1183 		if (TEST_FLAG(psta->htpriv.ldpc_cap, LDPC_HT_ENABLE_TX))
1184 			psta->ldpc = 1;
1185 
1186 		if (TEST_FLAG(psta->htpriv.stbc_cap, STBC_HT_ENABLE_TX))
1187 			psta->stbc = 1;
1188 	} else {
1189 		psta->ldpc = 0;
1190 		psta->stbc = 0;
1191 	}
1192 }
1193 
1194 int rtw_check_bcn_info(struct adapter *Adapter, u8 *pframe, u32 packet_len)
1195 {
1196 	unsigned int len;
1197 	unsigned char *p;
1198 	unsigned short	val16, subtype;
1199 	struct wlan_network *cur_network = &(Adapter->mlmepriv.cur_network);
1200 	/* u8 wpa_ie[255], rsn_ie[255]; */
1201 	u16 wpa_len = 0, rsn_len = 0;
1202 	u8 encryp_protocol = 0;
1203 	struct wlan_bssid_ex *bssid;
1204 	int group_cipher = 0, pairwise_cipher = 0, is_8021x = 0;
1205 	unsigned char *pbuf;
1206 	u32 wpa_ielen = 0;
1207 	u8 *pbssid = GetAddr3Ptr(pframe);
1208 	struct HT_info_element *pht_info = NULL;
1209 	struct ieee80211_ht_cap *pht_cap = NULL;
1210 	u32 bcn_channel;
1211 	unsigned short	ht_cap_info;
1212 	unsigned char ht_info_infos_0;
1213 	struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
1214 	int ssid_len;
1215 
1216 	if (is_client_associated_to_ap(Adapter) == false)
1217 		return true;
1218 
1219 	len = packet_len - sizeof(struct ieee80211_hdr_3addr);
1220 
1221 	if (len > MAX_IE_SZ)
1222 		return _FAIL;
1223 
1224 	if (memcmp(cur_network->network.MacAddress, pbssid, 6))
1225 		return true;
1226 
1227 	bssid = rtw_zmalloc(sizeof(struct wlan_bssid_ex));
1228 	if (!bssid)
1229 		return true;
1230 
1231 	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) > DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)) {
1232 		pmlmepriv->timeBcnInfoChkStart = 0;
1233 		pmlmepriv->NumOfBcnInfoChkFail = 0;
1234 	}
1235 
1236 	subtype = GetFrameSubType(pframe) >> 4;
1237 
1238 	if (subtype == WIFI_BEACON)
1239 		bssid->Reserved[0] = 1;
1240 
1241 	bssid->Length = sizeof(struct wlan_bssid_ex) - MAX_IE_SZ + len;
1242 
1243 	/* below is to copy the information element */
1244 	bssid->IELength = len;
1245 	memcpy(bssid->IEs, (pframe + sizeof(struct ieee80211_hdr_3addr)), bssid->IELength);
1246 
1247 	/* check bw and channel offset */
1248 	/* parsing HT_CAP_IE */
1249 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_HT_CAPABILITY, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1250 	if (p && len > 0) {
1251 		pht_cap = (struct ieee80211_ht_cap *)(p + 2);
1252 		ht_cap_info = le16_to_cpu(pht_cap->cap_info);
1253 	} else {
1254 		ht_cap_info = 0;
1255 	}
1256 	/* parsing HT_INFO_IE */
1257 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_HT_OPERATION, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1258 	if (p && len > 0) {
1259 		pht_info = (struct HT_info_element *)(p + 2);
1260 		ht_info_infos_0 = pht_info->infos[0];
1261 	} else {
1262 		ht_info_infos_0 = 0;
1263 	}
1264 	if (ht_cap_info != cur_network->BcnInfo.ht_cap_info ||
1265 	    ((ht_info_infos_0&0x03) != (cur_network->BcnInfo.ht_info_infos_0&0x03))) {
1266 		{
1267 			/* bcn_info_update */
1268 			cur_network->BcnInfo.ht_cap_info = ht_cap_info;
1269 			cur_network->BcnInfo.ht_info_infos_0 = ht_info_infos_0;
1270 			/* to do : need to check that whether modify related register of BB or not */
1271 		}
1272 		/* goto _mismatch; */
1273 	}
1274 
1275 	/* Checking for channel */
1276 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_DS_PARAMS, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1277 	if (p) {
1278 		bcn_channel = *(p + 2);
1279 	} else {/* In 5G, some ap do not have DSSET IE checking HT info for channel */
1280 		rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_HT_OPERATION,
1281 			   &len, bssid->IELength - _FIXED_IE_LENGTH_);
1282 		if (pht_info)
1283 			bcn_channel = pht_info->primary_channel;
1284 		else /* we don't find channel IE, so don't check it */
1285 			bcn_channel = Adapter->mlmeextpriv.cur_channel;
1286 	}
1287 
1288 	if (bcn_channel != Adapter->mlmeextpriv.cur_channel)
1289 		goto _mismatch;
1290 
1291 	/* checking SSID */
1292 	ssid_len = 0;
1293 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_SSID, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1294 	if (p) {
1295 		ssid_len = *(p + 1);
1296 		if (ssid_len > NDIS_802_11_LENGTH_SSID)
1297 			ssid_len = 0;
1298 	}
1299 	memcpy(bssid->Ssid.Ssid, (p + 2), ssid_len);
1300 	bssid->Ssid.SsidLength = ssid_len;
1301 
1302 	if (memcmp(bssid->Ssid.Ssid, cur_network->network.Ssid.Ssid, 32) ||
1303 			bssid->Ssid.SsidLength != cur_network->network.Ssid.SsidLength)
1304 		if (bssid->Ssid.Ssid[0] != '\0' &&
1305 		    bssid->Ssid.SsidLength != 0) /* not hidden ssid */
1306 			goto _mismatch;
1307 
1308 	/* check encryption info */
1309 	val16 = rtw_get_capability((struct wlan_bssid_ex *)bssid);
1310 
1311 	if (val16 & BIT(4))
1312 		bssid->Privacy = 1;
1313 	else
1314 		bssid->Privacy = 0;
1315 
1316 	if (cur_network->network.Privacy != bssid->Privacy)
1317 		goto _mismatch;
1318 
1319 	rtw_get_sec_ie(bssid->IEs, bssid->IELength, NULL, &rsn_len, NULL, &wpa_len);
1320 
1321 	if (rsn_len > 0)
1322 		encryp_protocol = ENCRYP_PROTOCOL_WPA2;
1323 	else if (wpa_len > 0)
1324 		encryp_protocol = ENCRYP_PROTOCOL_WPA;
1325 	else
1326 		if (bssid->Privacy)
1327 			encryp_protocol = ENCRYP_PROTOCOL_WEP;
1328 
1329 	if (cur_network->BcnInfo.encryp_protocol != encryp_protocol)
1330 		goto _mismatch;
1331 
1332 	if (encryp_protocol == ENCRYP_PROTOCOL_WPA || encryp_protocol == ENCRYP_PROTOCOL_WPA2) {
1333 		pbuf = rtw_get_wpa_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
1334 		if (pbuf && (wpa_ielen > 0)) {
1335 			rtw_parse_wpa_ie(pbuf, wpa_ielen + 2, &group_cipher,
1336 					 &pairwise_cipher, &is_8021x);
1337 		} else {
1338 			pbuf = rtw_get_wpa2_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
1339 
1340 			if (pbuf && (wpa_ielen > 0))
1341 				rtw_parse_wpa2_ie(pbuf, wpa_ielen + 2, &group_cipher,
1342 						  &pairwise_cipher, &is_8021x);
1343 		}
1344 
1345 		if (pairwise_cipher != cur_network->BcnInfo.pairwise_cipher ||
1346 		    group_cipher != cur_network->BcnInfo.group_cipher)
1347 			goto _mismatch;
1348 
1349 		if (is_8021x != cur_network->BcnInfo.is_8021x)
1350 			goto _mismatch;
1351 	}
1352 
1353 	kfree(bssid);
1354 	return _SUCCESS;
1355 
1356 _mismatch:
1357 	kfree(bssid);
1358 
1359 	if (pmlmepriv->NumOfBcnInfoChkFail == 0)
1360 		pmlmepriv->timeBcnInfoChkStart = jiffies;
1361 
1362 	pmlmepriv->NumOfBcnInfoChkFail++;
1363 
1364 	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) <= DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)
1365 		&& (pmlmepriv->NumOfBcnInfoChkFail >= DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD)) {
1366 		pmlmepriv->timeBcnInfoChkStart = 0;
1367 		pmlmepriv->NumOfBcnInfoChkFail = 0;
1368 		return _FAIL;
1369 	}
1370 
1371 	return _SUCCESS;
1372 }
1373 
1374 void update_beacon_info(struct adapter *padapter, u8 *pframe, uint pkt_len, struct sta_info *psta)
1375 {
1376 	unsigned int i;
1377 	unsigned int len;
1378 	struct ndis_80211_var_ie *pIE;
1379 
1380 	len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
1381 
1382 	for (i = 0; i < len;) {
1383 		pIE = (struct ndis_80211_var_ie *)(pframe + (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN) + i);
1384 
1385 		switch (pIE->ElementID) {
1386 		case WLAN_EID_VENDOR_SPECIFIC:
1387 			/* to update WMM parameter set while receiving beacon */
1388 			if (!memcmp(pIE->data, WMM_PARA_OUI, 6) && pIE->Length == WLAN_WMM_LEN)	/* WMM */
1389 				if (WMM_param_handler(padapter, pIE))
1390 					report_wmm_edca_update(padapter);
1391 
1392 			break;
1393 
1394 		case WLAN_EID_HT_OPERATION:	/* HT info */
1395 			/* HT_info_handler(padapter, pIE); */
1396 			bwmode_update_check(padapter, pIE);
1397 			break;
1398 
1399 		case WLAN_EID_ERP_INFO:
1400 			ERP_IE_handler(padapter, pIE);
1401 			VCS_update(padapter, psta);
1402 			break;
1403 
1404 		default:
1405 			break;
1406 		}
1407 
1408 		i += (pIE->Length + 2);
1409 	}
1410 }
1411 
1412 unsigned int is_ap_in_tkip(struct adapter *padapter)
1413 {
1414 	u32 i;
1415 	struct ndis_80211_var_ie *pIE;
1416 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1417 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1418 	struct wlan_bssid_ex		*cur_network = &(pmlmeinfo->network);
1419 
1420 	if (rtw_get_capability((struct wlan_bssid_ex *)cur_network) & WLAN_CAPABILITY_PRIVACY) {
1421 		for (i = sizeof(struct ndis_802_11_fix_ie); i < pmlmeinfo->network.IELength;) {
1422 			pIE = (struct ndis_80211_var_ie *)(pmlmeinfo->network.IEs + i);
1423 
1424 			switch (pIE->ElementID) {
1425 			case WLAN_EID_VENDOR_SPECIFIC:
1426 				if ((!memcmp(pIE->data, RTW_WPA_OUI, 4)) && (!memcmp((pIE->data + 12), WPA_TKIP_CIPHER, 4)))
1427 					return true;
1428 
1429 				break;
1430 
1431 			case WLAN_EID_RSN:
1432 				if (!memcmp((pIE->data + 8), RSN_TKIP_CIPHER, 4))
1433 					return true;
1434 				break;
1435 
1436 			default:
1437 				break;
1438 			}
1439 
1440 			i += (pIE->Length + 2);
1441 		}
1442 
1443 		return false;
1444 	} else {
1445 		return false;
1446 	}
1447 }
1448 
1449 int support_short_GI(struct adapter *padapter, struct HT_caps_element *pHT_caps, u8 bwmode)
1450 {
1451 	unsigned char bit_offset;
1452 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1453 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1454 
1455 	if (!(pmlmeinfo->HT_enable))
1456 		return _FAIL;
1457 
1458 	bit_offset = (bwmode & CHANNEL_WIDTH_40) ? 6 : 5;
1459 
1460 	if (le16_to_cpu(pHT_caps->u.HT_cap_element.HT_caps_info) & (0x1 << bit_offset))
1461 		return _SUCCESS;
1462 	else
1463 		return _FAIL;
1464 }
1465 
1466 unsigned char get_highest_rate_idx(u32 mask)
1467 {
1468 	int i;
1469 	unsigned char rate_idx = 0;
1470 
1471 	for (i = 31; i >= 0; i--) {
1472 		if (mask & BIT(i)) {
1473 			rate_idx = i;
1474 			break;
1475 		}
1476 	}
1477 
1478 	return rate_idx;
1479 }
1480 
1481 void Update_RA_Entry(struct adapter *padapter, struct sta_info *psta)
1482 {
1483 	rtw_hal_update_ra_mask(psta, 0);
1484 }
1485 
1486 void set_sta_rate(struct adapter *padapter, struct sta_info *psta)
1487 {
1488 	/* rate adaptive */
1489 	Update_RA_Entry(padapter, psta);
1490 }
1491 
1492 static u32 get_realtek_assoc_AP_vender(struct ndis_80211_var_ie *pIE)
1493 {
1494 	u32 Vender = HT_IOT_PEER_REALTEK;
1495 
1496 	if (pIE->Length >= 5) {
1497 		if (pIE->data[4] == 1)
1498 			/* if (pIE->data[5] & RT_HT_CAP_USE_LONG_PREAMBLE) */
1499 			/* bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_LONG_PREAMBLE; */
1500 			if (pIE->data[5] & RT_HT_CAP_USE_92SE)
1501 				/* bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_92SE; */
1502 				Vender = HT_IOT_PEER_REALTEK_92SE;
1503 
1504 		if (pIE->data[5] & RT_HT_CAP_USE_SOFTAP)
1505 			Vender = HT_IOT_PEER_REALTEK_SOFTAP;
1506 
1507 		if (pIE->data[4] == 2) {
1508 			if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_BCUT)
1509 				Vender = HT_IOT_PEER_REALTEK_JAGUAR_BCUTAP;
1510 
1511 			if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_CCUT)
1512 				Vender = HT_IOT_PEER_REALTEK_JAGUAR_CCUTAP;
1513 		}
1514 	}
1515 
1516 	return Vender;
1517 }
1518 
1519 unsigned char check_assoc_AP(u8 *pframe, uint len)
1520 {
1521 	unsigned int	i;
1522 	struct ndis_80211_var_ie *pIE;
1523 
1524 	for (i = sizeof(struct ndis_802_11_fix_ie); i < len;) {
1525 		pIE = (struct ndis_80211_var_ie *)(pframe + i);
1526 
1527 		switch (pIE->ElementID) {
1528 		case WLAN_EID_VENDOR_SPECIFIC:
1529 			if ((!memcmp(pIE->data, ARTHEROS_OUI1, 3)) || (!memcmp(pIE->data, ARTHEROS_OUI2, 3)))
1530 				return HT_IOT_PEER_ATHEROS;
1531 			else if ((!memcmp(pIE->data, BROADCOM_OUI1, 3)) ||
1532 				 (!memcmp(pIE->data, BROADCOM_OUI2, 3)) ||
1533 				 (!memcmp(pIE->data, BROADCOM_OUI3, 3)))
1534 				return HT_IOT_PEER_BROADCOM;
1535 			else if (!memcmp(pIE->data, MARVELL_OUI, 3))
1536 				return HT_IOT_PEER_MARVELL;
1537 			else if (!memcmp(pIE->data, RALINK_OUI, 3))
1538 				return HT_IOT_PEER_RALINK;
1539 			else if (!memcmp(pIE->data, CISCO_OUI, 3))
1540 				return HT_IOT_PEER_CISCO;
1541 			else if (!memcmp(pIE->data, REALTEK_OUI, 3))
1542 				return get_realtek_assoc_AP_vender(pIE);
1543 			else if (!memcmp(pIE->data, AIRGOCAP_OUI, 3))
1544 				return HT_IOT_PEER_AIRGO;
1545 			else
1546 				break;
1547 
1548 		default:
1549 			break;
1550 		}
1551 
1552 		i += (pIE->Length + 2);
1553 	}
1554 
1555 	return HT_IOT_PEER_UNKNOWN;
1556 }
1557 
1558 void update_IOT_info(struct adapter *padapter)
1559 {
1560 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1561 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1562 
1563 	switch (pmlmeinfo->assoc_AP_vendor) {
1564 	case HT_IOT_PEER_MARVELL:
1565 		pmlmeinfo->turboMode_cts2self = 1;
1566 		pmlmeinfo->turboMode_rtsen = 0;
1567 		break;
1568 
1569 	case HT_IOT_PEER_RALINK:
1570 		pmlmeinfo->turboMode_cts2self = 0;
1571 		pmlmeinfo->turboMode_rtsen = 1;
1572 		/* disable high power */
1573 		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1574 		break;
1575 	case HT_IOT_PEER_REALTEK:
1576 		/* rtw_write16(padapter, 0x4cc, 0xffff); */
1577 		/* rtw_write16(padapter, 0x546, 0x01c0); */
1578 		/* disable high power */
1579 		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1580 		break;
1581 	default:
1582 		pmlmeinfo->turboMode_cts2self = 0;
1583 		pmlmeinfo->turboMode_rtsen = 1;
1584 		break;
1585 	}
1586 }
1587 
1588 void update_capinfo(struct adapter *Adapter, u16 updateCap)
1589 {
1590 	struct mlme_ext_priv *pmlmeext = &Adapter->mlmeextpriv;
1591 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1592 	bool		ShortPreamble;
1593 
1594 	/*  Check preamble mode, 2005.01.06, by rcnjko. */
1595 	/*  Mark to update preamble value forever, 2008.03.18 by lanhsin */
1596 	/* if (pMgntInfo->RegPreambleMode == PREAMBLE_AUTO) */
1597 	{
1598 		if (updateCap & cShortPreamble) {
1599 			/*  Short Preamble */
1600 			if (pmlmeinfo->preamble_mode != PREAMBLE_SHORT) { /*  PREAMBLE_LONG or PREAMBLE_AUTO */
1601 				ShortPreamble = true;
1602 				pmlmeinfo->preamble_mode = PREAMBLE_SHORT;
1603 				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1604 			}
1605 		} else {
1606 			/*  Long Preamble */
1607 			if (pmlmeinfo->preamble_mode != PREAMBLE_LONG) { /*  PREAMBLE_SHORT or PREAMBLE_AUTO */
1608 				ShortPreamble = false;
1609 				pmlmeinfo->preamble_mode = PREAMBLE_LONG;
1610 				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1611 			}
1612 		}
1613 	}
1614 
1615 	if (updateCap & cIBSS) {
1616 		/* Filen: See 802.11-2007 p.91 */
1617 		pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1618 	} else {
1619 		/* Filen: See 802.11-2007 p.90 */
1620 		if (pmlmeext->cur_wireless_mode & (WIRELESS_11_24N)) {
1621 			pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1622 		} else if (pmlmeext->cur_wireless_mode & (WIRELESS_11G)) {
1623 			if ((updateCap & cShortSlotTime) /* && (!(pMgntInfo->pHTInfo->RT2RT_HT_Mode & RT_HT_CAP_USE_LONG_PREAMBLE)) */)
1624 				/*  Short Slot Time */
1625 				pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1626 			else
1627 				/*  Long Slot Time */
1628 				pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1629 		} else {
1630 			/* B Mode */
1631 			pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1632 		}
1633 	}
1634 
1635 	rtw_hal_set_hwreg(Adapter, HW_VAR_SLOT_TIME, &pmlmeinfo->slotTime);
1636 }
1637 
1638 void update_wireless_mode(struct adapter *padapter)
1639 {
1640 	int network_type = 0;
1641 	u32 SIFS_Timer;
1642 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1643 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1644 	struct wlan_bssid_ex *cur_network = &(pmlmeinfo->network);
1645 	unsigned char *rate = cur_network->SupportedRates;
1646 
1647 	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable))
1648 		pmlmeinfo->HT_enable = 1;
1649 
1650 	if (pmlmeinfo->HT_enable)
1651 		network_type = WIRELESS_11_24N;
1652 
1653 	if (rtw_is_cckratesonly_included(rate))
1654 		network_type |= WIRELESS_11B;
1655 	else if (rtw_is_cckrates_included(rate))
1656 		network_type |= WIRELESS_11BG;
1657 	else
1658 		network_type |= WIRELESS_11G;
1659 
1660 	pmlmeext->cur_wireless_mode = network_type & padapter->registrypriv.wireless_mode;
1661 
1662 	SIFS_Timer = 0x0a0a0808; /* 0x0808 -> for CCK, 0x0a0a -> for OFDM */
1663 													/* change this value if having IOT issues. */
1664 
1665 	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_RESP_SIFS,  (u8 *)&SIFS_Timer);
1666 
1667 	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_WIRELESS_MODE,  (u8 *)&(pmlmeext->cur_wireless_mode));
1668 
1669 	if (pmlmeext->cur_wireless_mode & WIRELESS_11B)
1670 		update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
1671 	else
1672 		update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
1673 }
1674 
1675 void update_sta_basic_rate(struct sta_info *psta, u8 wireless_mode)
1676 {
1677 	if (IsSupportedTxCCK(wireless_mode)) {
1678 		/*  Only B, B/G, and B/G/N AP could use CCK rate */
1679 		memcpy(psta->bssrateset, rtw_basic_rate_cck, 4);
1680 		psta->bssratelen = 4;
1681 	} else {
1682 		memcpy(psta->bssrateset, rtw_basic_rate_ofdm, 3);
1683 		psta->bssratelen = 3;
1684 	}
1685 }
1686 
1687 int update_sta_support_rate(struct adapter *padapter, u8 *pvar_ie, uint var_ie_len, int cam_idx)
1688 {
1689 	unsigned int	ie_len;
1690 	struct ndis_80211_var_ie *pIE;
1691 	int	supportRateNum = 0;
1692 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1693 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1694 
1695 	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, WLAN_EID_SUPP_RATES, &ie_len, var_ie_len);
1696 	if (!pIE)
1697 		return _FAIL;
1698 	if (ie_len > sizeof(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates))
1699 		return _FAIL;
1700 
1701 	memcpy(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates, pIE->data, ie_len);
1702 	supportRateNum = ie_len;
1703 
1704 	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, WLAN_EID_EXT_SUPP_RATES, &ie_len, var_ie_len);
1705 	if (pIE && (ie_len <= sizeof(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates) - supportRateNum))
1706 		memcpy((pmlmeinfo->FW_sta_info[cam_idx].SupportedRates + supportRateNum), pIE->data, ie_len);
1707 
1708 	return _SUCCESS;
1709 }
1710 
1711 void process_addba_req(struct adapter *padapter, u8 *paddba_req, u8 *addr)
1712 {
1713 	struct sta_info *psta;
1714 	u16 tid, param;
1715 	struct recv_reorder_ctrl *preorder_ctrl;
1716 	struct sta_priv *pstapriv = &padapter->stapriv;
1717 	struct ADDBA_request *preq = (struct ADDBA_request *)paddba_req;
1718 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1719 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1720 
1721 	psta = rtw_get_stainfo(pstapriv, addr);
1722 
1723 	if (psta) {
1724 		param = le16_to_cpu(preq->BA_para_set);
1725 		tid = (param>>2)&0x0f;
1726 
1727 		preorder_ctrl = &psta->recvreorder_ctrl[tid];
1728 
1729 		preorder_ctrl->indicate_seq = 0xffff;
1730 
1731 		preorder_ctrl->enable = pmlmeinfo->accept_addba_req;
1732 	}
1733 }
1734 
1735 void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1736 {
1737 	u8 *pIE;
1738 	__le32 *pbuf;
1739 
1740 	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1741 	pbuf = (__le32 *)pIE;
1742 
1743 	pmlmeext->TSFValue = le32_to_cpu(*(pbuf+1));
1744 
1745 	pmlmeext->TSFValue = pmlmeext->TSFValue << 32;
1746 
1747 	pmlmeext->TSFValue |= le32_to_cpu(*pbuf);
1748 }
1749 
1750 void correct_TSF(struct adapter *padapter, struct mlme_ext_priv *pmlmeext)
1751 {
1752 	rtw_hal_set_hwreg(padapter, HW_VAR_CORRECT_TSF, NULL);
1753 }
1754 
1755 void adaptive_early_32k(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1756 {
1757 	int i;
1758 	u8 *pIE;
1759 	__le32 *pbuf;
1760 	u64 tsf = 0;
1761 	u32 delay_ms;
1762 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1763 
1764 	pmlmeext->bcn_cnt++;
1765 
1766 	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1767 	pbuf = (__le32 *)pIE;
1768 
1769 	tsf = le32_to_cpu(*(pbuf+1));
1770 	tsf = tsf << 32;
1771 	tsf |= le32_to_cpu(*pbuf);
1772 
1773 	/* delay = (timestamp mod 1024*100)/1000 (unit: ms) */
1774 	/* delay_ms = do_div(tsf, (pmlmeinfo->bcn_interval*1024))/1000; */
1775 	delay_ms = do_div(tsf, (pmlmeinfo->bcn_interval*1024));
1776 	delay_ms = delay_ms/1000;
1777 
1778 	if (delay_ms >= 8)
1779 		pmlmeext->bcn_delay_cnt[8]++;
1780 		/* pmlmeext->bcn_delay_ratio[8] = (pmlmeext->bcn_delay_cnt[8] * 100) /pmlmeext->bcn_cnt; */
1781 	else
1782 		pmlmeext->bcn_delay_cnt[delay_ms]++;
1783 		/* pmlmeext->bcn_delay_ratio[delay_ms] = (pmlmeext->bcn_delay_cnt[delay_ms] * 100) /pmlmeext->bcn_cnt; */
1784 
1785 /*
1786 
1787 	for (i = 0; i<9; i++)
1788 	{
1789 			pmlmeext->bcn_delay_cnt[i] , i, pmlmeext->bcn_delay_ratio[i]);
1790 	}
1791 */
1792 
1793 	/* dump for  adaptive_early_32k */
1794 	if (pmlmeext->bcn_cnt > 100 && (pmlmeext->adaptive_tsf_done == true)) {
1795 		u8 ratio_20_delay, ratio_80_delay;
1796 		u8 DrvBcnEarly, DrvBcnTimeOut;
1797 
1798 		ratio_20_delay = 0;
1799 		ratio_80_delay = 0;
1800 		DrvBcnEarly = 0xff;
1801 		DrvBcnTimeOut = 0xff;
1802 
1803 		for (i = 0; i < 9; i++) {
1804 			pmlmeext->bcn_delay_ratio[i] = (pmlmeext->bcn_delay_cnt[i] * 100) / pmlmeext->bcn_cnt;
1805 
1806 			ratio_20_delay += pmlmeext->bcn_delay_ratio[i];
1807 			ratio_80_delay += pmlmeext->bcn_delay_ratio[i];
1808 
1809 			if (ratio_20_delay > 20 && DrvBcnEarly == 0xff)
1810 				DrvBcnEarly = i;
1811 
1812 			if (ratio_80_delay > 80 && DrvBcnTimeOut == 0xff)
1813 				DrvBcnTimeOut = i;
1814 
1815 			/* reset adaptive_early_32k cnt */
1816 			pmlmeext->bcn_delay_cnt[i] = 0;
1817 			pmlmeext->bcn_delay_ratio[i] = 0;
1818 		}
1819 
1820 		pmlmeext->DrvBcnEarly = DrvBcnEarly;
1821 		pmlmeext->DrvBcnTimeOut = DrvBcnTimeOut;
1822 
1823 		pmlmeext->bcn_cnt = 0;
1824 	}
1825 }
1826 
1827 void rtw_alloc_macid(struct adapter *padapter, struct sta_info *psta)
1828 {
1829 	int i;
1830 	u8 bc_addr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
1831 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1832 
1833 	if (!memcmp(psta->hwaddr, bc_addr, ETH_ALEN))
1834 		return;
1835 
1836 	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN)) {
1837 		psta->mac_id = NUM_STA;
1838 		return;
1839 	}
1840 
1841 	spin_lock_bh(&pdvobj->lock);
1842 	for (i = 0; i < NUM_STA; i++) {
1843 		if (pdvobj->macid[i] == false) {
1844 			pdvobj->macid[i]  = true;
1845 			break;
1846 		}
1847 	}
1848 	spin_unlock_bh(&pdvobj->lock);
1849 
1850 	if (i > (NUM_STA - 1))
1851 		psta->mac_id = NUM_STA;
1852 	else
1853 		psta->mac_id = i;
1854 }
1855 
1856 void rtw_release_macid(struct adapter *padapter, struct sta_info *psta)
1857 {
1858 	u8 bc_addr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
1859 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1860 
1861 	if (!memcmp(psta->hwaddr, bc_addr, ETH_ALEN))
1862 		return;
1863 
1864 	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN))
1865 		return;
1866 
1867 	spin_lock_bh(&pdvobj->lock);
1868 	if (psta->mac_id < NUM_STA && psta->mac_id != 1) {
1869 		if (pdvobj->macid[psta->mac_id] == true) {
1870 			pdvobj->macid[psta->mac_id] = false;
1871 			psta->mac_id = NUM_STA;
1872 		}
1873 	}
1874 	spin_unlock_bh(&pdvobj->lock);
1875 }
1876 
1877 /* For 8188E RA */
1878 u8 rtw_search_max_mac_id(struct adapter *padapter)
1879 {
1880 	u8 max_mac_id = 0;
1881 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1882 	int i;
1883 
1884 	spin_lock_bh(&pdvobj->lock);
1885 	for (i = (NUM_STA-1); i >= 0 ; i--) {
1886 		if (pdvobj->macid[i] == true)
1887 			break;
1888 	}
1889 	max_mac_id = i;
1890 	spin_unlock_bh(&pdvobj->lock);
1891 
1892 	return max_mac_id;
1893 }
1894 
1895 struct adapter *dvobj_get_port0_adapter(struct dvobj_priv *dvobj)
1896 {
1897 	if (get_iface_type(dvobj->padapters[i]) != IFACE_PORT0)
1898 		return NULL;
1899 
1900 	return dvobj->padapters;
1901 }
1902